Scammers Use Inferno Drainer to Steal $43K from CoinMarketCap Users

Scammers used Inferno Drainer to steal $43,000 in crypto from 110 CoinMarketCap users through a fake wallet prompt embedded in the site’s front-end...

Secure User-Friendly Blockchain Modular Wallet Design Using Android and OP-TEE

Emerging crypto economies still hemorrhage digital assets because legacy wallets leak private keys at almost every layer of the software stack, from user-space libraries to kernel memory dumps. This paper solves that twin crisis of security and interoperability by re-imagining key management as a...

Banana Squad Hides Data-Stealing Malware in Fake GitHub Repositories

Banana Squad hid data-stealing malware in fake GitHub repos posing as Python tools, tricking users and targeting sensitive info like browser and wallet data...

MAL-2025-5394 Malicious code in dynamic-global-wallet (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in dynamic-global-wallet (npm)

The package communicates with a domain associated with malicious activity...

Malicious code in rif-wallet-services (npm)

The package communicates with a domain associated with malicious activity...

MAL-2025-5456 Malicious code in rif-wallet-services (npm)

The package communicates with a domain associated with malicious activity...

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets

A new malware campaign is exploiting a weakness in Discord's invitation system to deliver an information stealer called Skuld and the AsyncRAT remote access trojan. "Attackers hijacked the links through vanity link registration, allowing them to silently redirect users from trusted sources to...

Malicious code in zora-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in zora-wallet

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in zora-wallet-core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-4948 Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in zora-wallet-core (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737a01b1cbbdc588edaadc6a0e02fe571afdcfe804c62a691270ab2e19eefd8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4947 Malicious code in zora-wallet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2764c900ca7254d541cb02d4393365a610648e80866768703dcae298b4f3a4b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719

CVE-2025-5719 relates to Vivo Wallet with an authentication bypass that could grant access to specific pages. Connected sources confirm the vulnerability class (authentication bypass) and name the affected software as Vivo Wallet/mobile wallet. The Red Hat and PT-Security entries corroborate the ...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719

The wallet has an authentication bypass vulnerability that allows access to specific pages...

CVE-2025-5719: Missing Authentication for Critical Function

The wallet has an authentication bypass vulnerability that allows access to specific pages...

Vivo wallet 安全漏洞

Vivo wallet is a mobile wallet application from the Chinese company Vivo. A security vulnerability exists in Vivo wallet, which stems from an authentication bypass that could lead to accessing specific pages...